Nieuws

False Positive meldingen Webroot

Onlangs heeft Webroot voor meerdere programma’s false positives geïdentificeerd als W32. Trojan. Gen. Indien u een endpoint heeft met een bestand dat in quarantaine is geplaatst of waar Webroot op 25-04-2017 tussen 02:00 – 03:00 een bestand met deze detectie heeft gevonden, volg dan onderstaande stappen.

 

Volg de volgende stappen om te voorkomen dat Webroot het bestand of de bestanden opnieuw detecteert:

 

Sign into the Webroot console at: https://my.webrootanywhere.com/default.aspx

Click the "Group Management" tab and then select Agent Commands > Files and Processes > Reverify All Files and Processes.

Go to "Endpoint protection", then click the "Status" tab.

Click the red text "View" under "Blocked Programs".

This list will show all files found by Webroot for the endpoint, for any files that have the malware group "Uncategorized File" or "Whitelisted File" click the checkbox next to the file, then click "Create Override" followed by "Restore from quarantine".

After creating overrides and restoring the false positive detections, click the "Group Management" tab and then select Agent Commands > Files and Processes > Reverify All Files and Processes, followed by the scan command.

Click the "Group Management" tab, select all the endpoints with this detection. Click Agent Commands > Agent > Scan.

 

Note: Depending on your poll interval set for the endpoint, this may take up to 24 hours to take effect. To force a poll update, follow these steps:

 

- Method 1 -

 

Locate the SecureAnywhere icon in the system tray.

Right-click the icon and select "Refresh Configuration".

 

- Method 2 -

 

To poll via command line option, use the appropriate command for the OS.

 

For 32bit Operating Systems, type: "C:\Program Files\Webroot\WRSA.exe" -poll

 

For 64bit Operating Systems, type: "C:\Program Files (x86)\Webroot\WRSA.exe" –poll"

 

This will restore all files matching the specified MD5 from quarantine to their original locations. If an error is received while restoring the file, we ask that you try re-downloading the software again.

 

Voor verdere vragen of ondersteuning kunt u contact opnemen met onze afdeling support.